Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier: IGLIkMK47iIXd0DkHzJ3qEGvl4LqoxSUazpiEUQcPxc=
Subject key identifier: 78:02:34:6F:16:5A:97:09:9C:F8:99:26:5E:72:37:F6:67:8F:9E:99
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer: /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial: 6E982737954E2738FFC7E01F574D5CABACECAA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number: 0152
Signing time: Sun 27 Apr 2025 16:32:50 +0000
Manifest this update: Sun 27 Apr 2025 16:27:50 +0000
Manifest next update: Mon 28 Apr 2025 19:13:50 +0000
Files and hashes: 1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: +ZD7Uuu61hyfUYnDsLk6x2rlpqk8CLnqW1iO3UwRmGY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:98:27:37:95:4e:27:38:ff:c7:e0:1f:57:4d:5c:ab:ac:ec:aa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Validity
Not Before: Apr 27 16:27:50 2025 GMT
Not After : Apr 28 19:13:50 2025 GMT
Subject: CN=7802346F165A97099CF899265E7237F6678F9E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:ed:a3:91:9b:89:af:82:db:f1:82:68:05:
58:4f:28:c4:21:ef:9e:ec:c6:59:e4:39:1d:26:1b:
a1:ff:77:59:c3:83:71:fd:4b:cc:dd:71:0e:51:ac:
b4:8e:27:01:68:b2:ab:d3:93:1b:ea:d8:58:94:6a:
ca:53:91:a2:77:0d:b6:1d:9c:fb:1e:34:e1:bc:8f:
23:5c:f2:e6:34:4d:e7:d0:cc:eb:e6:2d:e3:56:20:
b3:74:f7:0e:26:ec:72:8b:87:cd:c3:f4:38:eb:31:
0c:71:ca:75:15:8f:1e:2d:7c:93:86:58:91:65:d5:
a7:d5:dd:0f:2c:3d:19:55:1f:34:1e:c8:08:ba:72:
5b:01:40:83:23:06:27:91:22:a2:82:1f:53:6d:7e:
ce:1a:be:0e:c6:32:2d:6c:48:32:49:b2:57:ff:16:
7c:8f:1d:e3:08:ac:cf:e8:dd:f6:1b:aa:47:d5:d4:
2d:1c:c6:fe:64:cd:50:38:c1:59:9c:e4:1d:70:91:
b5:bf:23:71:b8:7a:13:30:a1:1c:4b:8b:dd:f8:f2:
21:81:a9:98:f5:5a:7a:f3:f6:2d:af:a6:82:77:7d:
03:fc:4d:27:25:74:2f:4c:9f:13:57:0b:72:5c:e5:
92:8b:3b:7d:81:db:7b:3a:13:84:0b:64:86:62:7a:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:02:34:6F:16:5A:97:09:9C:F8:99:26:5E:72:37:F6:67:8F:9E:99
X509v3 Authority Key Identifier:
keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:23:1c:34:9b:dd:bd:a9:3e:de:4c:52:8c:09:13:e8:55:da:
f0:55:98:45:72:ae:bb:25:65:0e:f8:a4:08:a7:19:6c:e1:aa:
fb:a0:ee:d3:a2:69:d9:e3:7e:e6:8a:71:67:8d:5c:32:89:5e:
4b:96:44:31:d0:fb:7f:eb:18:1c:9d:3e:44:11:7d:c9:31:6d:
f4:d2:75:b6:78:d9:13:54:bd:e8:8b:a6:8a:2e:77:5b:c9:24:
16:14:65:55:33:59:89:39:d5:75:88:2b:38:d9:73:9f:91:7a:
07:a9:f9:14:5f:47:7c:25:e7:74:69:36:1f:bc:f0:e0:8a:89:
ea:c0:54:8a:4f:fe:37:06:11:6c:ff:d2:00:70:32:5a:fc:85:
7f:95:fa:b7:e6:12:7e:c9:de:9b:08:83:ab:41:cc:3f:73:19:
bd:2f:38:f6:5a:69:7c:f9:73:30:51:28:47:c8:9c:20:5f:40:
e1:2c:c2:19:83:5b:1e:ba:2b:18:a8:36:c3:81:5b:ed:c4:10:
fa:df:a9:24:e1:46:f2:27:d5:f4:83:1a:2c:29:16:c1:fa:b3:
f8:fe:6e:0e:75:2f:f9:3c:f0:18:69:1a:03:dc:57:e4:02:fe:
cb:56:cc:eb:d0:ea:7c:ec:fb:a7:e6:44:ab:63:ae:23:18:5b:
ba:15:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:11 2025 by rpki-client